Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030363a3a2f33322d3438203d3e203631313338.roa
File: 326130363a613030363a3a2f33322d3438203d3e203631313338.roa (raw, json)
Hash identifier: BpqbkrxysEmC5hrNokT1hX4lOwJiGte7aquw0p9k2UQ=
Subject key identifier: 76:DD:79:38:81:D8:0C:18:C8:43:D2:5C:4D:0C:FE:93:E3:08:F9:E9
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 04AE2ADEC535BB25355A3FA1A0B9A3A6F4FEE3ED
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030363a3a2f33322d3438203d3e203631313338.roa
Signing time: Fri 09 Dec 2022 04:57:39 +0000
ROA not before: Fri 09 Dec 2022 04:52:39 +0000
ROA not after: Fri 08 Dec 2023 04:57:39 +0000
asID: 61138
IP address blocks: 2a06:a006::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ae:2a:de:c5:35:bb:25:35:5a:3f:a1:a0:b9:a3:a6:f4:fe:e3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:52:39 2022 GMT
Not After : Dec 8 04:57:39 2023 GMT
Subject: CN=76DD793881D80C18C843D25C4D0CFE93E308F9E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:3c:69:7f:e2:65:51:66:b5:2d:99:52:49:
d0:ae:b2:d9:5b:f7:9a:fb:0c:36:50:c3:f2:01:5d:
d8:cf:71:56:8c:a5:e0:3c:d2:11:71:73:8e:74:df:
73:3f:b9:d8:1c:23:19:93:09:eb:37:a2:d7:65:b3:
f5:89:f1:d6:56:74:58:e1:b0:1d:cc:46:e1:cc:fa:
f9:0d:24:1a:12:90:ab:1a:fa:54:b3:29:ca:b3:6a:
71:88:50:b8:c6:9b:4c:17:b5:71:80:fe:aa:eb:15:
e8:8b:09:26:de:e0:02:71:85:c7:6c:c8:b4:26:e0:
32:e7:5b:05:9c:54:38:45:cc:dd:d4:3a:8a:f0:95:
ae:b7:df:d3:9b:c3:60:bb:6d:f1:a3:09:08:6f:9b:
0d:a4:f6:45:8d:03:e4:0e:1a:bc:3a:c7:1d:be:4b:
60:a2:67:4f:01:c7:0a:69:93:ef:e8:8e:21:ba:1d:
49:b5:b6:9a:09:8a:8a:0f:b1:92:d8:fa:b5:0d:cc:
f6:83:1c:27:6e:70:96:9f:13:5b:99:5a:ae:94:b5:
4e:49:7a:5c:69:d4:71:b6:84:79:df:ce:56:1a:07:
8a:80:c6:19:39:5a:5e:b4:ca:01:0e:8f:71:4f:3c:
d2:25:e6:bf:90:a8:e6:df:24:4f:ef:39:0f:73:b6:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DD:79:38:81:D8:0C:18:C8:43:D2:5C:4D:0C:FE:93:E3:08:F9:E9
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030363a3a2f33322d3438203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a006::/32
Signature Algorithm: sha256WithRSAEncryption
a0:d4:01:48:fc:9e:33:5e:89:67:5c:03:63:9a:74:19:39:13:
7b:be:49:04:e6:5c:11:ac:7a:fc:5b:00:43:f3:f5:90:8a:69:
ba:fe:f3:0c:1a:e5:c2:b2:c2:34:a6:22:82:02:25:ff:a9:7f:
65:4a:c3:a1:b3:1f:b4:4b:14:72:2c:5b:b8:c1:54:10:e5:2f:
5a:c9:92:19:9b:39:a8:65:0b:0c:e8:23:9a:47:06:be:da:cf:
f2:70:5f:ab:7b:23:30:64:b1:99:41:0f:9d:b1:24:b8:a0:12:
cd:a9:f1:41:8b:4a:74:99:e3:f2:8f:58:fb:c3:47:98:93:e2:
f4:f1:ae:5d:b4:2d:36:5d:51:6a:49:6d:9e:1d:43:ec:9b:ea:
f3:cb:07:45:79:c0:87:3f:cb:36:06:17:91:30:96:49:91:6e:
81:70:b2:78:72:46:8f:bc:73:51:7e:ab:e6:56:04:2d:92:ec:
5c:a9:79:9d:a2:9b:e1:2f:ad:1d:0d:54:0e:45:e8:63:b1:d5:
56:49:b7:cb:35:1e:e7:2b:4b:32:90:ee:b4:af:f3:94:aa:11:
ff:02:dc:76:db:95:8b:50:d1:3d:d0:b5:22:a9:14:50:fd:7d:
04:2a:7c:7c:3b:bd:f1:e8:d3:23:3d:c9:30:16:32:d1:0d:c2:
5e:c4:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:09 2025 by rpki-client